Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add GitHub Advisory Database references to relevant reports #138

Closed
briandfoy opened this issue Feb 14, 2024 · 2 comments
Closed

Add GitHub Advisory Database references to relevant reports #138

briandfoy opened this issue Feb 14, 2024 · 2 comments
Assignees
@briandfoy
Labels
Status: released there is a new release with this fix Type: enhancement improve a feature that already exists

Comments

@briandfoy
Copy link
Owner

See f9c08fd for example.
@briandfoy briandfoy added the Type: enhancement improve a feature that already exists label Feb 14, 2024
@briandfoy
Copy link
Owner Author

GitHub has an API to go from CVE to GHSA - https://docs.github.com/en/rest/security-advisories/global-advisories?apiVersion=2022-11-28#list-global-security-advisories

briandfoy added a commit that referenced this issue Feb 17, 2024
@briandfoy
Add GitHub Advisory Database identifiers to external reports (#138)
3fcd993 
See also (github/advisory-database#3536)
@briandfoy briandfoy self-assigned this Dec 31, 2024
@briandfoy
Copy link
Owner Author

I think this is mostly handled. New reports with a CVE should automatically get the GHSA number

@briandfoy briandfoy added the Status: released there is a new release with this fix label Jan 2, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@briandfoy briandfoy

Labels
Status: released there is a new release with this fix Type: enhancement improve a feature that already exists
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@briandfoy